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1 . A method for securing a host service comprising: 

evaluating a risk to the host service based on communication with a remote 
system; 

5 creating a risk profile for the host service; and 

deploying a security measure to protect the host service based on the risk profile. 

2. A method for securing a host service as recited in claim 1 wherein creating a risk 
profile includes assigning a priority to the risk profile. 

10 

3. A method for securing a host service as recited in claim 1 wherein evaluating a 
risk to the host service further includes determining if the host service calls an interface. 

4. A method as recited in claim 1 wherein profiling a risk on the host further 
1 5 includes determining if an external application requests access to the host. 

5 . A method as recited in claim 1 wherein profiling a risk on the host further 
includes requesting data from the host. 

20 6. A method as recited in claim 1 wherein evaluating a risk to the host service 
further includes determining if the application is directly exchanging data with an 
external application. 

7. A method as recited in claim 1 wherein creating the risk profile further includes 
25 determining if the application is indirectly exchanging data with the remote system. 

8. A method as recited in claim 1 wherein creating the risk profile includes 
evaluating a file. 
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9. A method as recited in claim 1 wherein creating the risk profile includes 
evaluating a programming interface. 

10. A risk profiling module comprising: 

a communications module for determining whether a data transfer involves the 

host; 

a logic module for determining a risk on the host and assigning a priority to the 
risk; and 

a repository for storing data from the communications module and the logic 
module. 

11. A risk profiling module as recited in claim 1 0 wherein the communications 
module samples data from a host service. 

12. A risk profiling module as recited in claim 1 0 wherein the logic module 
determines if the host is called. 

13. A risk profiling module as recited in claim 1 0 wherein the communications 
module includes an external port interface for providing data from an external 
application. 

1 4. A risk profiling module as recited in claim 1 0 wherein the communications 
module includes an interprocess communications module for providing data from an 
internal application. 

15. A system as recited in claim 10 wherein the risk profile module evaluates a port. 

16. A system as recited in claim 1 0 wherein the risk profile module evaluates an 
interface. 
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17. A computer program product for profiling a risk on a host, the computer program 
product being embodied in a computer readable medium and comprising computer 
instructions for: 

evaluating a risk to the host service based on communication with a remote 

system; 

creating a risk profile for the host service; and 

deploying a security measure to protect the host service based on the risk profile. 

18. A data signal embodied in a carrier wave comprising: 

instructions for evaluating a risk to the host service based on communication with 

a remote system; 

instructions for creating a risk profile for the host service; and 

instructions for deploying a security measure to protect the host service based on 

the risk profile. 
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